Advanvced Cybersecurity Framework Design for a High-Risk Ind…

Advanced Cybersecurity Framework Design for a High-Risk Industry

Objective:

Students will create a fully customized cybersecurity framework tailored for a specific, high-risk

industry.

This will require in-depth research, synthesis of learned concepts, and practical application of NIST

CSF and MITRE ATT&CK.

Scenario:

You are a cybersecurity consultant tasked with developing a cybersecurity framework for a niche

industry.

Choose one of the following industries:

1. Maritime Shipping and Logistics

2. Healthcare IoT Device Manufacturers

3. Smart Agriculture Systems (e.g., IoT in farming)

Your client recently suffered a data breach and ransomware attack targeting their critical operations.

Develop a comprehensive cybersecurity plan based on the tasks below.

Assignment Tasks

Part 1: Industry Analysis (Research and Manual Data Collection)

Advanced Cybersecurity Framework Design for a High-Risk Industry

Requirements:

1. Research the chosen industry.

– Describe its unique cybersecurity challenges and risks.

– Include at least three real-world incidents affecting this industry. Cite original sources.

2. Summarize findings.

– Compile your research findings into a concise 2-page report.

Part 2: Framework Design

Requirements:

1. Develop a NIST CSF-Based Plan

– Using the NIST Cybersecurity Framework, create a customized plan addressing your chosen

industry’s specific risks.

– Include four specific actions under each function: Identify, Protect, Detect, Respond, and

Recover.

2. Analyze MITRE ATT&CK Tactics

– Choose three real-world attack techniques from MITRE ATT&CK relevant to your industry.

– Describe the tactic, vulnerabilities it exploits, and countermeasures using NIST CSF functions.

Advanced Cybersecurity Framework Design for a High-Risk Industry

3. Create Manual Flow Diagrams

– Create a manually-drawn or custom visual representation of the framework.

Part 3: Incident Simulation and Playbook Development

Requirements:

1. Simulate a Cybersecurity Incident

– Create a fictional incident scenario specific to your chosen industry.

2. Develop an Incident Response Playbook

– Write a step-by-step playbook for responding to the incident.

Part 4: Report and Reflection

Requirements:

1. Create a Comprehensive Report

– Include sections for industry analysis, framework design, incident simulation, and the response

playbook.

2. Reflection

– Describe challenges and lessons learned while tailoring the framework for your industry.

Submission Guidelines:

– Format: Submit a single PDF document including your research, visuals, and diagrams.

– Plagiarism Policy: Use of AI tools, templates, or pre-written content is strictly prohibited.

Advanced Cybersecurity Framework Design for a High-Risk Industry

Grading Rubric (100 Points)

– Part 1: Industry Analysis and Research (20 points)

– Part 2: Framework Design (30 points)

– Part 3: Incident Simulation and Playbook (30 points)

– Part 4: Report and Reflection (20 points)

Demonstrate creativity, critical thinking, and original work.